Doxbin Scrape Exposes 435,784 Email Addresses
What Happened — In January 2025, a scrape of the public “doxing” platform Doxbin harvested 435,784 email addresses. The data set was added to Have I Been Pwned’s breach catalog, confirming the exposure of personal identifiers.
Why It Matters for Trust & Control Assurance
- Highlights the need for continuous monitoring of unauthorized data exposure and the ability to produce defensible evidence of privacy controls.
- Demonstrates that privacy‑by‑design and data‑handling controls must be auditable, not just theoretical.
- Aligns with the control objective of protecting personal data and maintaining an audit‑ready posture for privacy regulations.
Who Is Affected — Individuals whose email addresses were posted on Doxbin; the breach can impact any organization whose employees’ addresses appear in the scraped list.
Recommended Actions
- Conduct an inventory of email address holdings and classify them as personal data.
- Deploy monitoring for public data leaks and establish a response playbook for unsolicited exposure events.
- Document privacy controls and retain evidence to satisfy audit and regulatory inquiries. Source: Have I Been Pwned
Technical Notes — Attack vector: automated scraping of publicly posted content (no CVE). Data type exposed: email addresses. Source: same as above